Listing of Claims: 

1 . (Currently Amended) A cryptographic method of anonymously signing a message by a 
member of a group comprising [[n]] a plurality of members each equipped with calculation 
means (3S) and associated storage means (34), which m e thod is charact e riz e d in that it compris e s 
the following initial st e ps at th e tim e of constituting th e group , the method initially comprising ; 

[[-]] a first step of calculating, in which at first calculation means of a 
trusted authority^ calculat e a pair of asymmetric keys (30, 31) common to the 
members of the group and comprising a common public key (30) and a common 
private key; (31) (op e ration 1 ) [[,]] 

[[-]] a second step of calculating, at in which the first calculation means of 
the trusted authority, calculat e a group public key (33) associated with the 
members of the group; (op e ration 2) [[,]] 

[[-]] a third step of in which, for each m e mber [[,]] calculating, during an 
interaction between the calculation means of the trusted authority and the 
calculation means of the member, a group private key (33 +) is calculat e d 
(operation 3) and stor e d (op e ration 4) for each member of the group and storing 
the private key in the storage means (34) of the each member, each group private 
key (££4.) being associated with the group public key (33) and being different for 
each member of the group;[[,]] 

[[-]] a fourth step of determining, in which at the first calculation means of 
the trusted authority, det e rmin e as many symmetrical secret keys (34*) as there are 
members of the group; (op e ration §) [[,]] and 

[[-]] a fifth step of encrypting, at in which the first calculation means of 
the trusted authority, (20) e ncrypt the common private key (34) using each of the 
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symmetrical secret keys (34,) to obtain as many encrypted forms of the common 
private key (34) as there are non-revoked members; (op e ration 6) [[ ,]] 

and in that it compris e s th e following st e ps on each revocation within of a 
member from the group , the method further comprisinR : 

[[-]] a sixth step of modifying, in which at the first calculation means of 
the trusted authority, (20) modify the pair of common asymmetric keys common 
to the group (34) to d e t e rmin e create [[a]] an up-to-date common public key (30) 
and [[a]] an up-to-date common private key; (31) that are up to dat e (op e ration 

*)[[,]] 

[[-]] a seventh step of encrypting, in which at the first calculation means of 
the trusted authority, (20) e ncrypt the up-to-date common private key (34) using 
each of the symmetrical secret keys (34*) to obtain as many encrypted forms of 
the up-to-date common private key (34) as there are non-revoked members ; and 
(op e ration 9) [[,]] 

and in that th e m e thod compris e s th e following st e ps on th e when a non- 
revoked group member anonymously signing (operation 10) signs a message 
having to be sent to an addressee , the method further comprising : 

[[-]] an eighth step of updating in which the common private key (34) 
stored by in the storage means (34) of the signing member is updat e d (op e ration 
44) only if one of th e encrypted valu e s value of the up-to-date common private 
key (34) may be decrypted using the symmetrical secret key (34+) stored in the 
m e mb e r's storage means of the signing member; (24)[[,]] 

[[-]] a ninth step of calculating, at the in which th e m e mb e r's calculation 
means of the signing member, (25) calculat e (op e ration 12) an anonymous 
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signature of the message using its the group private key for the signing member; 
(»*)[[,]] and 

[[-]] a tenth step of calculating, at in which th e m e mb e r's the calculation 
means of the signing member, (24) calculat e (op e ration 13) an additional 
signature of the a combination comprising the message and the anonymous 
signature using the m e mb e r's up-to-date common private key (34) of the signing 
member . 

2. (Currently Amended) [[A]] The cryptographic anonymous signature method according 
to claim 1, wherein the group is constituted at a date tl and the method further comprising the 
following op e rations comprises : 

[[-]] during the first step associating , at the first calculation means^ associat e 
the common private key (34) with an updat e updated date equal to tl; (operation 
44)[[J] and 

[[-]] during the third step storing , at the storage means (24) of each member^ 
stor e th e updat e the updated date of the common private key; (op e ration 15) [[,]] 

wherein th e following op e ration is e x e cut e d at the time of each revocation 
within the group at a date t2: 

[[-]] during the sixth step modifying , at the first calculation means of the 
trusted authority, (20) modify the updat e the updated date to determine an updat e 
updated date equal to the date t2 ; and (op e ration 16) [[, and]] 

wherein th e following op e ration is ex e cut e d on each anonymous signing by 
the member of the group of [[a]] the message having to be sent to [[an]] the 
addressee; 
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[[-]] during the eighth step, the common private key stored in the m e mb e r's 
storage means of the signing member (24) is updated (op e ration 11) only if the 
updat e updated date (B + ) in the m e mb e r's storage means of the signing member 
(24) is also different from the updat e updated date (B) of the up-to-date common 
private key (£4-) updated by the first calculation means of the trusted authority . 

3. (Currently Amended) [[A]] The cryptographic anonymous signature method according 
to claim 1, further comprising: the following op e rations [[:]] 

[[-]] during the third step calculating , at the first calculation means^ calculat e 
for each m e mb e r of th e group an identifier (3#*) of the member for each member 
of the group (op e ration 3) and storing the identifier (3#i) of the each member of 
the group is stor e d in the m e mb e r's storage means of each member; and (24) 
(op e ration and]] 

calculating, th e following op e ration on e ach r e vocation within th e group IT: -]] 
at the first calculation means of the trusted authority (20) calculat e an identifier 
(34*) for each new member of the group on each revocation within the group , 

4. (Currently Amended) [[A]] The cryptographic method according to claim 3 1 ef 
anonymously signing a m e ssag e , wh e r e in th e st e ps furth e r compris e further omprising : 

[[-]] during the third step storing , at storage means (36) connected to the 
first calculation means of the trusted authority, (20) stor e the symmetrical secret 
key (34*) of each member, the group public key (32), the public key (3G) common 
to the members of the group, each of the encrypted forms of the common private 
key (34), and each of the identifiers (3#<), each encrypted form of the common 
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private key (34) being associated with one of the identifiers ; and (3#i)[[,]j 

and farth e r comprising th e following op e ration for each modification of 
the composition of the group that corresponds to a revocation of one of the 
members of the group , the method further comprising : 

[[-]] removing the secret key (34*) of that member from the storage means 
(36) connected to the first calculation means of the trusted authority; and (30)[[,]] 

and furth e r comprising th e following op e rations to update the common 
private key (34) stored in the m e mber's storage means (34) of the member, the 
method further comprising : 

[[-]] reading, at the m e mber's calculation means of the member, (25) r e ad 
the diff e r e nt the encrypted form (34) of the common private key stored in the 
storage means (36) connected to the first calculation means of the trusted 
authority (30) and associated with the identifier (35*) of the member;[[,]] and 

[[-]] decrypting, at the m e mb e r's calculation means of the member, (35) 
d e crypt th e diff e r e nt the encrypted form of the common private key (34) 
previously read using the secret key (34*) stored in the m e mb e r's storage means of 
the member. (24)[[.]] 

5. (Currently Amended) [[A]] The cryptographic method according to claim 1 ef 
anonymously signing a m e ssag e, wherein the initial st e p s further compris e further comprising : 
[[-]] during the third step storing , at storage means (36) connected to the 
first calculation means of the trusted authority, (20) stor e the secret key of each 
member, the pair of asymmetric keys (30, 31) common to the members of the 
group, and the group public ke y; and (33)[[,]] 
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and furth e r comprising the following op e ration on each modification of 
the composition of the group that corresponds to a revocation within the group: 

[[-]] eliminating the secret key of the a revoked member is e liminat e d 
from the storage means (36) connected to the first calculation means of the trusted 
authority; and (2Q)[[,]] 

and further comprising th e following op e rations to update the common 
private key (31) in a memb e r's in the storage means of the member, the method 
further comprising: (34)[[:]] 

[[-]] reading, at the m e mb e r's calculation means (3§) of the member read 
the diff e r e nt encrypted forms of the common private key (34) in the storage 
means (36) connected to the first calculation means of the trusted authority; 
«2Q)[[J] and 

[[-]] using, at the m e mb e r's calculation means of the member, use the 
secret key (34+) in the m e mb e r's storage means (34) of the member to decrypt the 
diff e r e nt encrypted forms of the common private key (34). 

6. - 9 (Canceled) 

10. (Currently Amended) A cryptographic system for anonymously signing a digital 
message^ by impl e m e nting a method according to claim 1, charact e rized in that it compris e s at 
least the system comprising : 

[[-]] first calculation means (30) for calculating (operations 1, 2) at least 
one of said a pair of asymmetric keys (30, 31) common to the members of the a 
group of n plural members and said a group public key (33) associated with the 
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group, for calculating (op e ration 3) said group private key (33+) for each member 
during interaction with th e m e mb e r's a calculation means (35) of the each 
member , each said group private key (33-+) for each member being associated with 
said group public key (33) and being different for each member of the group, for 
creating det e rmining (op e ration 5) as many of said symmetrical secret keys (34*) 
as there are members of the group, and encrypting (operation 6) said a common 
private key (34) of said asymmetrical keys common to said members of the group 
using each of said symmetrical secret keys (34*) to obtain as many encrypted 
forms of said common private key (34) as there are non-revoked members; and 

a smart card associated with each member as many smart cards (2U )-as 
ther e ar e memb e rs in the group, wh e r e in each smart card compris e s comprising : 

means (34) for storing said common private key (34) common to th e 
m e mb e rs of th e group , said group private key (33+) of the each member, and said 
symmetrical secret key (34+) assigned to the each member;[[,]] 

means (35) for updating said common private key (34) stored in the 
m e mb e r' s storage means of the each member (34) to update (op e ration 11) said 
common private key (34) only if one of th e encrypted valu e s value of said 
common private key (34) calculated by said first calculation means (20) of th e 
apparatus may be decrypted using said symmetrical secret key (34+) in said 
m e mb e r' s storage means of the each member; and (24), and 

calculation means (35) for calculating (op e ration 12) an anonymous 
signature for a message using its said group private key (33+) of the each member 
and for calculating (op e ration 13) an additional signature for the a combination 
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comprising the message and the anonymous signature using th e m e mb e r' s said 
common private key (34). 



11. (Currently Amended) [[An]] A computer-readable medium encoded with a computer 
program executed by a computer which causes articl e of manufacture for use in a computer 
syst e m, having a comput e r usabl e m e dium, to p e rform a cryptographic m e thod of anonymously 
anonymous signing of a message by a member of a group comprising a plurality of [[n]] 
members each equipped with calculation means (25) and associated storage means^ (2 4 ), wherein 
th e comput e r usabl e m e dium includ e s a comput e r r e adabl e cod e m e ans for causing the computer 
program comprising : 

(i) program code for, at creation of th e tim e of constituting the group: 

calculating (op e ration 1) , with a first calculation means of a 
trusted authority, a pair of asymmetric keys (30, 31) common to 
the members of the group and comprising a common public key 
(30) and a common private key (34), 

calculating (op e ration 2) , with the first calculation means of 
the trusted authority , a group public key (32) associated with the 
group of members; [[,]] 

calculating (op e ration 3), for e ach m e mb e r , during an 
interaction between the calculation means of the trusted authority 
and the a calculation means of the member, a group private key 
(££4) for each member of the group l"|\"|] and storing (op e ration 4 ) 
said group private key (££±) in the a storage means (24) of the each 
member, each group private key (^3-+) being associated with the 
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group public key (33) and being different for each member of the 
group;[[,]] 

determining (operation 5) , with the first calculation means, 
as many symmetrical secret keys (34*) as there are members of the 
group;[[,]] and 

encrypting (operation 6) , with the first calculation means 
(30), the common private key (34) using each of the symmetrical 
secret keys (34*) to obtain as many encrypted forms of the common 
private key (34) as there are non-revoked members; 
(ii) program code for, on each member revocation within from the group: 

modifying (op e ration 8) , with the first calculation means 
(20), the pair of common asymmetric keys (34) common to the 
members of the group to d e t e rmin e create [[a]] an up-to-date 
common public key (30) and [[a]] an up-to-date common private 
key; (31) that arc up to date [[,]] 

encrypting (operation 9) , with the first calculation means 
(30), the up-to-date common private key (34) of the pair of 
asymmetric keys common to the members of the group using each 
of the secret keys (34*) to obtain as many encrypted forms of the 
up-to-date common private key (34) as there are non-revoked 
members; and 

(iii) program code for, when a on th e group member anonymously signing 
(operation 10) signs a message having to be sent to an addressee: 
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updating (op e ration 11) the common private key (34) stored 
by the storage means (24) of the signing member only if one of the 
encrypted valu e s value of the up-to-date common private key (34) 
may be decrypted using the symmetrical secret key (34*) in the 
m e mb e r's storage means of the signing member; (24)[[,]] 

calculating (op e ration 12) , with the m e mb e r's calculation 
means of the signing member (25), an anonymous signature of the 
message using it^s the group private key (33+), and 

calculating (operation 13) , with the m e mb e r's calculation 
means of the signing member (34), an additional signature of the a 
combination comprising the message and the anonymous signature 
using the m e mb e r's up-to-date common private key (34) of the 
signing member . 
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